Legal
Privacy Policy
Effective Date: April 23, 2026
DemoScan respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.
What We Collect
Account information
When you sign up for DemoScan, we collect your email address and a password. If you provide your name or company name during signup, we collect that too.
Billing information
Payments are processed by Paddle, our payment provider. We do not store your credit card details on our servers. Paddle provides us with limited information — customer ID, subscription status, and billing country.
Project data
When you upload plans to DemoScan, we store those files and the takeoff results we generate. This includes:
- The PDF plans you upload
- Rasterized page images generated during processing (deleted automatically once analysis completes)
- Line items extracted by our AI analysis
- Exports you generate (Excel files, etc.)
- Project names, client names, and addresses you enter
Usage data
We track basic usage — when you log in, how many takeoffs you create, whether our system encountered errors processing your files. We do not track your behavior for advertising purposes or build profiles of you.
How We Store It
- Account and project data is stored in a PostgreSQL database hosted on Render, encrypted at rest.
- Uploaded plans and generated exports are stored in Cloudflare R2, encrypted at rest.
- All connections to DemoScan use HTTPS (TLS 1.2 or higher).
Third Parties We Share Data With
We use a small number of services to operate DemoScan. We share only the data each service needs to function.
You warrant that you have the right to upload any plans or documents submitted to DemoScan — either as the authorized recipient, as a representative of the demolition contractor, or with explicit permission from the issuing party. DemoScan is not responsible for unauthorized uploads of third-party intellectual property.
We do not sell your data. We do not share your data with advertisers. We do not share your data with any party except the services above.
Your Rights
You can:
- Access all data we have about you by logging in to your account
- Delete any project, takeoff, or export at any time
- Delete your entire account, which permanently removes your data within 24 hours
- Configure retention policies — set your uploads and takeoff data to auto-delete after 24 hours, 30 days, or 90 days, or keep them until you delete them yourself (the default)
- Export your takeoffs in Excel format at any time
Deletion is permanent. There is no trash folder, no undelete. When you cancel your subscription, your data remains in read-only mode for 60 days so you can export anything you need. After 60 days of inactivity post-cancellation, your data is permanently deleted.
California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information we have collected
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (we do not sell or share personal information)
- Right to limit use of sensitive personal information (we do not use sensitive personal information beyond what's necessary to provide the service)
- Right to non-discrimination — we will not treat you differently for exercising these rights
Uploaded Plan Sets and Third-Party Intellectual Property
Construction plan sets are the intellectual property of the general contractor or owner who issued them. DemoScan does not claim ownership of any uploaded plans. Uploaded documents are processed solely for the purpose of generating demolition takeoffs — no other use is made of the content.
By uploading plans to DemoScan, you confirm that you are authorized to do so — either as the direct recipient of the plans, as a representative of the demolition contractor, or with explicit permission from the issuing party. DemoScan is not liable for unauthorized uploads of third-party intellectual property. Responsibility for ensuring upload authorization rests entirely with the account holder.
If a third party believes their intellectual property has been uploaded without authorization, they should contact the account holder directly. DemoScan will cooperate with valid legal requests for content removal.
DemoScan's infrastructure providers — Anthropic, Render, and Cloudflare — are SOC 2 certified. Anthropic's API does not use uploaded content for model training. Render and Cloudflare store data encrypted at rest and do not use customer data for any purpose beyond service delivery. Links to their respective privacy policies: Anthropic, Render, Cloudflare.
Changes to This Policy
If we make material changes to this Privacy Policy, we will notify you by email before the changes take effect. The "Effective Date" at the top reflects the most recent version.